lif
ab6a5a6b6d
fix(api): reject requests with NUL bytes in URL (#869)
## Summary
- Added `NulByteValidationMiddleware` to validate incoming requests
- Returns 400 Bad Request when NUL bytes (%00) detected in URL path or
query
- Prevents PostgreSQL encoding errors from being exposed as 500 errors
## Before
```
GET /v0.1/servers?cursor=%00
→ 500 Internal Server Error
→ "invalid byte sequence for encoding UTF8: 0x00"
```
## After
```
GET /v0.1/servers?cursor=%00
→ 400 Bad Request
→ "Invalid request: query parameters contain null bytes"
```
Fixes #862
Signed-off-by: majiayu000 <1835304752@qq.com>
Co-authored-by: Radoslav Dimitrov <radoslav@stacklok.com>
|
2026-01-03 19:14:44 +02:00 |
| .. |
|
api
|
fix(api): reject requests with NUL bytes in URL (#869)
|
2026-01-03 19:14:44 +02:00 |
|
auth
|
Apply gofmt formatting to all Go files (#588)
|
2025-09-30 17:32:22 +03:00 |
|
config
|
Apply gofmt formatting to all Go files (#588)
|
2025-09-30 17:32:22 +03:00 |
|
database
|
Fix NuGet.org base URL default, improve API integration (#813)
|
2025-12-09 07:19:38 -08:00 |
|
importer
|
Remove namespace match validation for websiteUrl and remote URL (#769)
|
2025-11-17 11:32:59 +00:00 |
|
service
|
Enforce schema validation on the publish and edit API level (#598)
|
2025-10-05 13:57:10 +01:00 |
|
telemetry
|
Add OpenTelemetry metrics instrumentation (#290)
|
2025-08-21 14:23:37 +01:00 |
|
validators
|
feat: Add LocalTransport/RemoteTransport with URL template variables (#570)
|
2025-12-11 09:17:32 -08:00 |